Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-109350 | 7.1 (v4.0) 6.5 (v3.1) | Gitoxide gix-pack before 0.75.0 Denial of Service via … |
GitoxideLabs |
gix-pack |
2026-10-12T16:05:33.204Z | 2026-10-13T17:39:05.740Z |
| cve-2026-109349 | 7.1 (v4.0) 6.5 (v3.1) | gix-pack before 0.75.0 Reachable Assertion DoS via Pac… |
GitoxideLabs |
gix-pack |
2026-10-12T16:05:32.535Z | 2026-10-13T16:53:40.906Z |
| cve-2026-109348 | 5.3 (v4.0) 4.3 (v3.1) | Gitoxide gix-mailmap before 0.35.0 CPU Denial of Servi… |
GitoxideLabs |
gix-mailmap |
2026-10-12T16:05:31.899Z | 2026-10-13T16:16:02.083Z |
| cve-2026-109347 | 8.6 (v4.0) 7.2 (v3.1) | Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass |
vrana |
adminer |
2026-10-12T16:05:31.293Z | 2026-10-15T02:50:48.679Z |
| cve-2026-109346 | 8.5 (v4.0) 8.1 (v3.1) | better-auth 1.3.8-beta.3 before 1.7.0-rc.3 Device Auth… |
better-auth |
better-auth |
2026-10-12T16:05:30.595Z | 2026-10-26T16:46:48.047Z |
| cve-2026-109345 | 5.1 (v4.0) 6.1 (v3.1) | DOMPurify before 3.4.16 XSS via IN_PLACE Returned Rawt… |
cure53 |
DOMPurify |
2026-10-12T16:05:29.905Z | 2026-10-13T17:40:08.757Z |
| cve-2026-109344 | 5.1 (v4.0) 6.1 (v3.1) | DOMPurify from 3.4.13 before 3.4.16 DOM XSS via IN_PLA… |
cure53 |
DOMPurify |
2026-10-12T16:05:29.221Z | 2026-10-13T16:53:48.747Z |
| cve-2026-109343 | 8.6 (v4.0) 8.1 (v3.1) | SurrealDB before 3.3.0 Cross-Tenant Access via USE Statement |
surrealdb |
surrealdb |
2026-10-12T16:05:28.543Z | 2026-10-13T16:14:08.944Z |
| cve-2026-109342 | 5.3 (v4.0) 5.4 (v3.1) | SurrealDB 3.0.0 before 3.3.0 Missing Authentication in… |
surrealdb |
surrealdb |
2026-10-12T16:05:27.862Z | 2026-10-15T02:49:51.816Z |
| cve-2026-109341 | 7.1 (v4.0) 7.1 (v3.1) | SurrealDB before 3.3.0 Field Permission Bypass via PAT… |
surrealdb |
surrealdb |
2026-10-12T16:05:27.167Z | 2026-10-26T16:46:48.284Z |
| cve-2026-109340 | 5.3 (v4.0) 5.4 (v3.1) | SurrealDB 3.1.0 before 3.3.0 Authorization Bypass via … |
surrealdb |
surrealdb |
2026-10-12T16:05:26.502Z | 2026-10-13T17:52:23.768Z |
| cve-2026-109339 | 6.9 (v4.0) 4.9 (v3.1) | SurrealDB 3.1.0 before 3.3.0 Memory Exhaustion via Sur… |
surrealdb |
surrealdb |
2026-10-12T16:05:25.820Z | 2026-10-13T16:53:58.068Z |
| cve-2026-109338 | 7.1 (v4.0) 6.5 (v3.1) | SurrealDB before 3.3.0 Denial of Service via Headers N… |
surrealdb |
surrealdb |
2026-10-12T16:05:25.106Z | 2026-10-13T16:11:45.843Z |
| cve-2026-109337 | 5.3 (v4.0) 4.3 (v3.1) | SurrealDB before 3.3.0 Field Permission Bypass via LIV… |
surrealdb |
surrealdb |
2026-10-12T16:05:24.429Z | 2026-10-15T02:49:15.623Z |
| cve-2026-109336 | 5.3 (v4.0) 4.3 (v3.1) | SurrealDB before 3.3.0 Field Permission Bypass via LIV… |
surrealdb |
surrealdb |
2026-10-12T16:05:23.751Z | 2026-10-26T16:46:48.474Z |
| cve-2026-109335 | 7.1 (v4.0) 6.5 (v3.1) | SurrealDB 3.0.0 before 3.3.0 Information Disclosure vi… |
surrealdb |
surrealdb |
2026-10-12T16:05:23.096Z | 2026-10-13T18:14:55.000Z |
| cve-2026-109334 | 8.6 (v4.0) 8.1 (v3.1) | SurrealDB before 3.3.0 Cross-Tenant Access via Surreal… |
surrealdb |
surrealdb |
2026-10-12T16:05:22.448Z | 2026-10-13T16:54:08.346Z |
| cve-2026-109333 | 7.1 (v4.0) 6.5 (v3.1) | SurrealDB 3.0.0 before 3.3.0 Cross-Tenant Record Read … |
surrealdb |
surrealdb |
2026-10-12T16:05:21.820Z | 2026-10-13T16:08:52.215Z |
| cve-2026-109332 | 2.3 (v4.0) 3.1 (v3.1) | Network-AI before 5.15.2 CORS Origin Validation Error … |
Jovancoding |
Network-AI |
2026-10-12T16:05:21.175Z | 2026-10-15T02:48:30.203Z |
| cve-2026-109331 | 7.5 (v4.0) 7.4 (v3.1) | Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass vi… |
Jovancoding |
Network-AI |
2026-10-12T16:05:20.585Z | 2026-10-26T16:46:48.646Z |
| cve-2026-109330 | 5.3 (v4.0) 4.3 (v3.1) | Network-AI 5.0.0 before 5.15.2 Cross-Site WebSocket Hi… |
Jovancoding |
Network-AI |
2026-10-12T16:05:19.915Z | 2026-10-13T18:14:09.306Z |
| cve-2026-109329 | 8.5 (v4.0) 6.5 (v3.1) | Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 C… |
Admidio |
admidio |
2026-10-12T16:05:19.232Z | 2026-10-13T16:54:16.827Z |
| cve-2026-109328 | 5.3 (v4.0) 6.1 (v3.1) | Admidio 5.0.0 before 5.0.15 Unauthenticated Stored XSS… |
Admidio |
admidio |
2026-10-12T16:05:18.638Z | 2026-10-13T16:05:59.044Z |
| cve-2026-109327 | 5.1 (v4.0) 6.1 (v3.1) | Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 … |
Admidio |
admidio |
2026-10-12T16:05:17.976Z | 2026-10-15T02:46:58.013Z |
| cve-2026-109326 | 8.7 (v4.0) 7.5 (v3.1) | Grav before 2.1.7 Information Disclosure via Nested .g… |
getgrav |
grav |
2026-10-12T16:05:17.303Z | 2026-10-18T12:13:29.706Z |
| cve-2026-109325 | 8.7 (v4.0) 7.5 (v3.1) | Grav from 2.0.22 before 2.1.7 Clockwork Profiler Authe… |
getgrav |
grav |
2026-10-12T16:05:16.676Z | 2026-10-13T18:12:51.809Z |
| cve-2026-109324 | 7.1 (v4.0) 6.5 (v3.1) | Grav before 2.1.7 Memory Exhaustion via Oversized Imag… |
getgrav |
grav |
2026-10-12T16:05:15.404Z | 2026-10-13T16:54:24.396Z |
| cve-2026-109323 | 6.9 (v4.0) 5.3 (v3.1) | Grav Star Ratings 2.0.1 through 2.0.3 Missing Server-S… |
getgrav |
grav-plugin-star-ratings |
2026-10-12T16:05:14.772Z | 2026-10-13T15:50:34.726Z |
| cve-2026-109322 | 5.3 (v4.0) 6.1 (v3.1) | Grav Guestbook before 0.5.2 Stored XSS via AJAX Pagina… |
getgrav |
grav-plugin-guestbook |
2026-10-12T16:05:14.089Z | 2026-10-15T02:45:15.941Z |
| cve-2026-109321 | 9.3 (v4.0) 9.1 (v3.1) | Grav Login OAuth Plugin before 1.4.3 Predictable Local… |
getgrav |
grav-plugin-login-oauth |
2026-10-12T16:05:13.414Z | 2026-10-18T12:13:29.858Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-197 | Vulnérabilités dans Adobe Flash Player | 2008-04-09T00:00:00.000000 | 2008-04-09T00:00:00.000000 |
| certa-2008-avi-196 | Vulnérabilité dans le noyau Windows | 2008-04-09T00:00:00.000000 | 2008-04-09T00:00:00.000000 |
| certa-2008-avi-195 | Vulnérabilités dans Microsoft Internet Explorer | 2008-04-09T00:00:00.000000 | 2008-04-09T00:00:00.000000 |
| certa-2008-avi-194 | Vulnérabilité dans un contrôle ActiveX de Microsoft Windows | 2008-04-09T00:00:00.000000 | 2008-04-09T00:00:00.000000 |
| certa-2008-avi-193 | Vulnérabilités des moteurs de script VBScript et JScript de Windows | 2008-04-09T00:00:00.000000 | 2008-04-09T00:00:00.000000 |
| certa-2008-avi-192 | Vulnérabilités dans Graphics Device Interface (GDI) de Windows | 2008-04-09T00:00:00.000000 | 2008-04-09T00:00:00.000000 |
| certa-2008-avi-191 | Vulnérabilité du client DNS de Microsoft Windows | 2008-04-09T00:00:00.000000 | 2008-04-09T00:00:00.000000 |
| certa-2008-avi-190 | Vulnérabilités dans Microsoft Office Viso | 2008-04-09T00:00:00.000000 | 2008-04-09T00:00:00.000000 |
| certa-2008-avi-189 | Vulnérabilité dans Microsoft Project | 2008-04-09T00:00:00.000000 | 2008-04-09T00:00:00.000000 |
| certa-2008-avi-188 | Vulnérabilité du serveur applicatif IBM Websphere | 2008-04-08T00:00:00.000000 | 2008-04-08T00:00:00.000000 |
| certa-2008-avi-187 | Vulnérabilité dans HP Integrity Server | 2008-04-08T00:00:00.000000 | 2008-04-08T00:00:00.000000 |
| certa-2008-avi-186 | Vulnérabilité dans UnZip | 2008-04-08T00:00:00.000000 | 2008-04-08T00:00:00.000000 |
| certa-2008-avi-185 | Vulnérabilités dans CA ARCserve Backup | 2008-04-08T00:00:00.000000 | 2008-04-08T00:00:00.000000 |
| certa-2008-avi-184 | Multiples vulnérabilités de CA Alert Notification Server | 2008-04-04T00:00:00.000000 | 2008-04-04T00:00:00.000000 |
| certa-2008-avi-183 | Vulnérabilités dans CUPS | 2008-04-04T00:00:00.000000 | 2008-04-04T00:00:00.000000 |
| certa-2008-avi-182 | Vulnérabilités dans des produits Symantec | 2008-04-04T00:00:00.000000 | 2008-04-04T00:00:00.000000 |
| certa-2008-avi-181 | Multiples vulnérabilités dans le navigateur Opera | 2008-04-04T00:00:00.000000 | 2008-04-04T00:00:00.000000 |
| certa-2008-avi-180 | Vulnérabilité de certains produits Cisco | 2008-04-04T00:00:00.000000 | 2008-04-04T00:00:00.000000 |
| certa-2008-avi-179 | Multiples vulnérabilités du logiciel multimédia Quicktime d'Apple | 2008-04-03T00:00:00.000000 | 2008-04-03T00:00:00.000000 |
| certa-2008-avi-178 | Vulnérabilité dans Apache-SSL | 2008-04-03T00:00:00.000000 | 2008-04-03T00:00:00.000000 |
| certa-2008-avi-177 | Vulnérabilité dans lighttpd | 2008-04-03T00:00:00.000000 | 2008-04-03T00:00:00.000000 |
| certa-2008-avi-176 | Vulnérabilité dans Sympa | 2008-04-02T00:00:00.000000 | 2008-04-02T00:00:00.000000 |
| certa-2008-avi-175 | Vulnérabilité dans IBM DB2 Content Manager | 2008-04-02T00:00:00.000000 | 2008-04-02T00:00:00.000000 |
| certa-2008-avi-174 | Vulnérabilité dans Macrovision OCI | 2008-04-02T00:00:00.000000 | 2008-04-02T00:00:00.000000 |
| certa-2008-avi-173 | Vulnérabilité dans Novell Netware server | 2008-04-02T00:00:00.000000 | 2008-04-02T00:00:00.000000 |
| certa-2008-avi-172 | Vulnérabilité du logiciel GnuPG | 2008-04-02T00:00:00.000000 | 2008-04-02T00:00:00.000000 |
| certa-2008-avi-171 | Vulnérabilité dans OpenSSH | 2008-04-02T00:00:00.000000 | 2008-04-02T00:00:00.000000 |
| certa-2008-avi-170 | Vulnérabilité dans des produits Computer Associates | 2008-04-02T00:00:00.000000 | 2008-04-02T00:00:00.000000 |
| certa-2008-avi-169 | Vulnérabilité du logiciel antivirus Avast! | 2008-04-01T00:00:00.000000 | 2008-04-01T00:00:00.000000 |
| certa-2008-avi-168 | Vulnérabilité de phpMyAdmin | 2008-04-01T00:00:00.000000 | 2008-04-01T00:00:00.000000 |